diff options
| author | Michael Shuler <michael@pbandjelly.org> | 2012-11-18 15:26:27 -0600 |
|---|---|---|
| committer | Michael Shuler <michael@pbandjelly.org> | 2012-11-18 15:26:27 -0600 |
| commit | fde3640547bcceec53d61e4f91f57fa73bb93ce2 (patch) | |
| tree | 70f6462ca75ea235629c00113921b711b6f58c46 | |
| parent | d0a75063403e4d542d0ca09e1fa8a787761dcafd (diff) | |
| download | ca-certificates-debian/20121114.tar.gz | |
Add CKT_NSS_MUST_VERIFY_TRUST clarification note to d/changelogdebian/20121114
| -rw-r--r-- | debian/changelog | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/debian/changelog b/debian/changelog index c34a3bb..d1a78f9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -10,7 +10,7 @@ ca-certificates (20121114) unstable; urgency=low [ Michael Shuler ] * Add note to previous mozilla/certdata.txt changelog entry to document - CKT_NSS_MUST_VERIFY_TRUST changes + CKT_NSS_MUST_VERIFY_TRUST changes. -- Michael Shuler <michael@pbandjelly.org> Wed, 14 Nov 2012 23:58:59 -0600 @@ -20,6 +20,9 @@ ca-certificates (20121105) unstable; urgency=low - Replace legacy "no explicit trust" flag of CKT_NSS_TRUST_UNKNOWN for CKT_NSS_MUST_VERIFY_TRUST, instead of a mix of both flags: https://bugzilla.mozilla.org/show_bug.cgi?id=757189 + This upstream fix does not change the CA certificates installed in + ca-certificates as both flags are ignored. Only those CA certificates + with the CKT_NSS_TRUSTED_DELEGATOR flag in certdata.txt are installed. Certificates added (+) (none removed): + "Actalis Authentication Root CA" + "Trustis FPS Root CA" |